I used the symfony framework for many applications, and the infrastructure itself is pretty secure by default.
, , , ( ), , , 404 - , symfony , Symfony.
security.yml, , , , is_secure: on.
, settings.yml , , XSS. , . -, 1.2.
, , - . Symfony, .
Symbony Deployment Cheat Sheet. , , , .
. symfony 1.2, , . .